{APP_NAME}

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_603":604,"_605":606},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_455":-5,"_20":456,"_22":457,"_458":459,"_460":461,"_26":462,"_24":463,"_464":-5,"_465":-5,"_466":54,"_467":468,"_469":45,"_470":-5,"_471":-5,"_472":473},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","ttai","name","uFns","branchName","main","version","path","backend/api.ts","project",{"_33":397,"_13":14,"_46":398,"_399":-5,"_400":54,"_401":402,"_403":402,"_404":405,"_406":-5,"_407":408,"_409":78,"_410":45,"_411":-5,"_412":-5,"_413":48,"_414":415,"_416":417,"_418":419,"_420":421,"_422":-5,"_423":424,"_425":424,"_426":427,"_428":427,"_429":427,"_430":424,"_431":424,"_432":433,"_434":435,"_436":437,"_438":54},"tree",[58,59,60,61,62,63,64,65],"file",{"_33":34,"_13":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":56},"contents",[],"upstream","pull","ahead","behind","envVars","id","58f663dd-718a-4b98-bb04-b6a2d00f62cb","api.ts","fileId","f8c41c7e-902e-11f1-84be-1607ee4eb77e","parentId","ec3e8050-6128-11f1-9fb3-1607ee4eb77e","branchId","5ce0246c-39c2-47d2-86b7-4133abafc79e","branchVersion",102,"latest",true,"createdAt",["D",1785866684153],0,"fileType","script","content","// api.ts — Mini framework: typed errors + body readers. Hono (index.http.ts)\n// owns dispatch and error mapping via app.onError; handlers here just throw\n// HttpError for client errors. (Named api.ts, not http.ts — Val Town infers a\n// val's type from its filename; only index.http.ts should be an HTTP val.)\n\n// ------------------------------------------------------------------------------\n// errors\n// ------------------------------------------------------------------------------\n\nexport class HttpError extends Error {\n constructor(\n message: string,\n readonly status: number,\n ) {\n super(message);\n this.name = \"HttpError\";\n }\n}\n\nexport function isHttpError(error: unknown): error is HttpError {\n return error instanceof HttpError;\n}\n\n// ------------------------------------------------------------------------------\n// body readers\n// ------------------------------------------------------------------------------\n\nexport async function readJson(req: Request): Promise {\n try {\n return await req.json();\n } catch {\n throw new HttpError(\"Invalid JSON body\", 400);\n }\n}\n\nexport async function readText(req: Request): Promise {\n try {\n return await req.text();\n } catch {\n return \"\";\n }\n}\n","deleted",false,"label",[57,35],"backend",{"_33":264,"_13":57,"_36":39,"_38":-5,"_40":41,"_42":152,"_44":45,"_46":265,"_17":48,"_49":125,"_51":-5,"_53":54,"_55":-5,"_73":266,"_18":267},{"_33":120,"_13":121,"_36":122,"_38":-5,"_40":41,"_42":123,"_44":45,"_46":124,"_17":48,"_49":125,"_51":-5,"_53":54,"_55":-5,"_73":126,"_18":127},{"_33":112,"_13":113,"_36":114,"_38":-5,"_40":41,"_42":115,"_44":45,"_46":116,"_17":48,"_49":24,"_51":117,"_53":54,"_55":-5,"_73":118,"_18":119},{"_33":103,"_13":104,"_36":105,"_38":-5,"_40":41,"_42":106,"_44":45,"_46":107,"_17":108,"_49":24,"_51":109,"_53":54,"_55":-5,"_73":110,"_18":111},{"_33":94,"_13":95,"_36":96,"_38":-5,"_40":41,"_42":97,"_44":45,"_46":98,"_17":48,"_49":99,"_51":100,"_53":54,"_55":-5,"_73":101,"_18":102},{"_33":86,"_13":87,"_36":88,"_38":-5,"_40":41,"_42":89,"_44":45,"_46":90,"_17":48,"_49":24,"_51":91,"_53":54,"_55":-5,"_73":92,"_18":93},{"_33":76,"_13":77,"_36":78,"_38":-5,"_40":41,"_42":79,"_44":45,"_46":80,"_17":71,"_49":81,"_51":82,"_53":54,"_55":83,"_73":84,"_18":85},{"_33":66,"_13":67,"_36":68,"_38":-5,"_40":41,"_42":69,"_44":45,"_46":70,"_17":71,"_49":24,"_51":72,"_53":54,"_55":-5,"_73":74,"_18":75},"2a4d1b1e-e1cb-4ccc-ba12-27b29f553f8d","val.yml","ec9d2eac-6128-11f1-a087-1607ee4eb77e",99,["D",1785864194556],4,"# val.yml — metadata contract for this val. Not consumed by `vt` today; reserved\n# for a future repo wrapper over vt-cli (safer deploys, env checks, file typing).\nname: \"uFns\"\norg: \"ttai\"\npublic: true\n# Mock/dev integration fns behind one global API key + a beer.css admin UI\n# gated to ADMIN_USERS via Val Town OAuth (see backend/auth.ts). Dev/staging only.\n# Only index.http.ts is the HTTP val and cron.ts the interval val. Other files\n# must avoid Val Town's reserved filename infixes (http, cron, email, …) — e.g.\n# backend/api.ts, not backend/http.ts (previously a stray second HTTP val).\nfiles:\n index.http.ts: http\n cron.ts: interval\n","children",[],[67],"41da38a5-1c51-47ca-811e-1cee58ea9d1f","index.http.ts","ecb9a046-6128-11f1-a23b-1607ee4eb77e",98,["D",1785864195231],"http","// index.http.ts — HTTP entry point built on Hono. Two surfaces:\n// Fn calls → /get-user-details, /get-information*, /webhook — POST-only,\n// each requires the global API key (Authorization: Bearer ).\n// Admin UI → / (tabs), POST /settings, POST /api-key/regenerate — Val Town\n// OAuth, gated to the ADMIN_USERS allow-list (see backend/auth.ts).\n// This file is pure wiring; logic lives in backend/ and frontend/.\n\nimport { Hono } from \"npm:hono@^4\";\nimport type { Context, Next } from \"npm:hono@^4\";\nimport { isHttpError } from \"./backend/api.ts\";\nimport { authenticateApi, getAdminUc, withValTownAuth } from \"./backend/auth.ts\";\nimport { getInformationSlow } from \"./backend/fns/get-information-slow.ts\";\nimport { getInformation } from \"./backend/fns/get-information.ts\";\nimport { getUserDetails } from \"./backend/fns/get-user-details.ts\";\nimport { webhookHandler } from \"./backend/fns/webhook.ts\";\nimport { buildAdminView } from \"./backend/pages/admin.ts\";\nimport { regenerateApiKey, saveSettingsForm } from \"./backend/settings-store.ts\";\nimport { html, jsonError } from \"./backend/shared.ts\";\nimport { renderAdmin } from \"./frontend/admin.tsx\";\nimport { renderDenied, renderLogin } from \"./frontend/auth.tsx\";\nimport type { AdminUser } from \"./frontend/layout.tsx\";\n\nconst app = new Hono<{ Variables: { adminUser: AdminUser } }>();\n\n// ------------------------------------------------------------------------------\n// fn routes — POST-only, each gated by the global API key\n// ------------------------------------------------------------------------------\n\nasync function apiKeyGate(c: Context, next: Next): Promise {\n await authenticateApi(c.req.raw);\n await next();\n}\n\napp.post(\"/get-user-details\", apiKeyGate, async (c) => await getUserDetails(c.req.raw));\napp.post(\"/get-information\", apiKeyGate, async (c) => await getInformation(c.req.raw));\napp.post(\"/get-information-slow\", apiKeyGate, async (c) => await getInformationSlow(c.req.raw));\napp.post(\"/webhook\", apiKeyGate, async (c) => await webhookHandler(c.req.raw));\n\n// ------------------------------------------------------------------------------\n// admin UI — Val Town OAuth, then the tabbed page + its two action routes\n// ------------------------------------------------------------------------------\n\nasync function adminGate(c: Context<{ Variables: { adminUser: AdminUser } }>, next: Next) {\n const uc = await getAdminUc(c.req.raw);\n if (!uc.isAuthed) return html(renderLogin(), 401);\n if (!uc.isAdmin) return html(renderDenied(uc.username ?? \"\"), 403);\n c.set(\"adminUser\", { username: uc.username ?? \"\", avatarUrl: uc.avatarUrl });\n await next();\n}\n\napp.get(\"/\", adminGate, async (c) => {\n const saved = c.req.query(\"saved\") === \"1\";\n const view = await buildAdminView(new URL(c.req.url), saved);\n return html(renderAdmin(view, c.get(\"adminUser\")));\n});\n\napp.post(\"/settings\", adminGate, async (c) => {\n await saveSettingsForm(c.req.raw);\n return c.redirect(\"/?saved=1#data\", 303);\n});\n\napp.post(\"/api-key/regenerate\", adminGate, async (c) => {\n await regenerateApiKey();\n return c.redirect(\"/?saved=1#data\", 303);\n});\n\n// ------------------------------------------------------------------------------\n// error handling\n// ------------------------------------------------------------------------------\n\napp.onError((err) => {\n if (isHttpError(err)) return jsonError(err.message, err.status);\n console.error(\"[uFns] unhandled error:\", err instanceof Error ? err.message : err);\n return jsonError(\"Internal server error\", 500);\n});\napp.notFound((c) => jsonError(`Not found: ${c.req.path}`, 404));\n\nexport default withValTownAuth((req) => app.fetch(req));\n","micro-fns",[],[77],"e70eafe0-39e0-45c4-8d7e-4abf2fd344df","deno.json","ec82e4ac-6128-11f1-9fb3-1607ee4eb77e",8,["D",1780696381966],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\"dom\", \"dom.iterable\", \"dom.asynciterable\", \"deno.ns\", \"deno.unstable\"]\n },\n \"fmt\": {\n \"lineWidth\": 100\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\"no-explicit-any\", \"no-external-import\", \"no-import-prefix\"]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[],[87],"612c8dcf-a5cf-490b-8aad-f4f05d872659","cron.ts","eccd21ac-6128-11f1-ac3a-1607ee4eb77e",16,["D",1780696382454],"interval","// cron.ts — Scheduled cleanup: prune logs older than RETENTION_DAYS.\n\nimport { RETENTION_DAYS } from \"./backend/config.ts\";\nimport { deleteOldData } from \"./backend/db.ts\";\n\nexport default async function cleanup() {\n const result = await deleteOldData(RETENTION_DAYS);\n console.log(\n `Cleanup done: deleted ${result.requests} request(s), ${result.webhooks} webhook(s) older than ${RETENTION_DAYS}d`,\n );\n}\n",[],[95],"bf4228e0-d3ee-45c8-9c79-df13780b2579","README.md","eca9edfe-6128-11f1-90f7-1607ee4eb77e",111,["D",1785875509829],7,"# uFns\n\nSmall integration functions for ToughTongue AI — mock user details, weather + headlines lookups,\nwebhook capture, and a single tabbed admin UI (Data / Debug / Activity / Info).\n\nPair with **uAgents** for heavier per-customer agent APIs behind header secrets.\n\n| Val | Role |\n| ----------- | ---------------------------------------------------------------- |\n| **uFns** | Lightweight integration fns (`/get-user-details`, `/webhook`, …) |\n| **uAgents** | Customer-scoped agent fns at `/fns//` |\n\nDeployed to the `ttai` org on Val Town (`vt create … --org-name ttai`).\n\n## Auth\n\nTwo independent surfaces:\n\n- **Fn calls** — one **global API key**, sent as `Authorization: Bearer ` (or\n `X-API-Key: `) on every request. The key is auto-minted on first use, viewable and rotatable\n on the **Data** tab. There is no per-customer scoping (that's what uAgents is for) — one key,\n checked in constant time, guards every fn.\n- **Admin UI** (`/`) — **Val Town sign-in**, gated to an allow-list, same pattern as uAgents. Set\n the `ADMIN_USERS` env var (Val Town sidebar) to a comma-separated list of Val Town usernames\n (case-insensitive). Sign-in uses\n [`std/oauth`](https://docs.val.town/guides/auth/#sign-in-with-val-town); see `backend/auth.ts`.\n\n## Admin UI\n\nA single page at `/` with five hash-routed tabs (`/#data`, `/#debug`, `/#integration`, `/#activity`,\n`/#info`):\n\n| Tab | What |\n| --------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| **Data** | Mock user fields (returned by `/get-user-details`) + the global API key |\n| **Debug** | Pick a fn, edit its JSON body, and fire a live call from the browser — see the resolved URL, `Authorization` header, and an equivalent `curl` update live |\n| **Integration** | Pick a fn and get its endpoint URL, auth header, description, and parameters JSON Schema — ready to paste into a ToughTongue AI tool/function definition |\n| **Activity** | Fn catalog + a live request/webhook log |\n| **Info** | Role, auth model, quick start, pairing with uAgents |\n\n## Fn endpoints\n\nAll POST-only, all require the API key:\n\n| Path | Purpose |\n| ----------------------- | --------------------------------------------------------------------------------------- |\n| `/get-user-details` | Returns the mock user from SQLite |\n| `/get-information` | Weather + headlines, padded to ~3s |\n| `/get-information-slow` | Weather + headlines, padded to ~20s |\n| `/webhook` | Captures a POST body for the Activity log — a regular fn like the rest, not a catch-all |\n\n`/get-information*` accept an optional JSON body `{\"location\": \"Tokyo\"}`; without one they fall back\nto the mock user's `location` (Data tab, default `Paris`).\n\nReady-to-run `curl` examples with the real deployed base URL filled in live on the **Activity** tab\n(empty-state) and the **Info** tab (quick start) — no guessing your val's hostname.\n\n### Weather + headlines API options\n\nBoth fns call **free, keyless** public APIs — no signup, no rate-limit surprises for a dev tool:\n\n- **Weather — [Open-Meteo](https://open-meteo.com)** (chosen). Free forecast + geocoding APIs, no\n API key, no rate limit for reasonable use. Alternatives considered: [wttr.in](https://wttr.in)\n (free, keyless, but plain-text/ANSI-first — JSON is an afterthought) and\n [OpenWeatherMap](https://openweathermap.org/api) (richer data, but requires a free-tier API key —\n adds a required env var for a mock endpoint).\n- **Headlines — [Hacker News (Firebase) API](https://github.com/HackerNews/API)** (chosen). Free,\n keyless, and consistently fast (`topstories.json` + a parallel `item/.json` fetch per story —\n measured ~0.3s per call). Headlines skew tech/HN, not general news. Alternatives considered:\n [GDELT DOC 2.0](https://blog.gdeltproject.org/gdelt-doc-2-0-api-debuts/) (free, keyless, broader\n real-world news coverage via full-text search — but measured ~13s per query from this repo's dev\n network, too slow/unpredictable for a 6–20s budget); **NewsAPI.org** / **GNews** / **currentsapi**\n (broader coverage and categories, but all require a free-tier API key).\n\n## File layout\n\n```\nbackend/\n api.ts HttpError, readJson/readText, dispatch (named api.ts, not\n http.ts — Val Town infers a val's type from its filename;\n only index.http.ts should be an HTTP val)\n auth.ts OAuth admin gate + global API key check\n config.ts mock-user fields, FN_SPECS (fn catalog + Debug samples)\n db.ts SQLite: settings, request log, webhook log\n settings-store.ts mock-user settings + the global API key\n information.ts weather + headlines fetch/pad logic\n fns/ one file per fn handler\n pages/ view-model assembly for SSR (admin.ts, activity.ts)\nfrontend/\n layout.tsx Shell, Tab, Panel, Picker, ReadOnlyField, UserBadge\n admin.tsx composes Data/Debug/Activity/Info into the tabbed page\n data.tsx, debug.tsx, activity.tsx, info.tsx one tab each\n auth.tsx signed-out / access-denied pages\n styles/ modular CSS layers (Next.js-style)\n tokens.ts design tokens + semantic M3 aliases (palette is runtime-generated)\n base.ts document layout + typography scale\n components.ts cards, tabs, key row, fields/buttons/tables, debug box\n index.ts composes layers → GLOBAL_CSS\n```\n\n## Push\n\nFrom this directory:\n\n```bash\nvt create uFns . --org-name ttai --upload-if-exists --no-editor-files\nvt push # ship changes\n```\n\n`val.yml` is not read by `vt` yet — it documents the val contract for a future repo wrapper over\nvt-cli.\n\n## Add a function\n\n1. Write a thin handler in `backend/fns/.ts` — throw `HttpError` for client errors; body\n parsing via `readJson` / `readText` from `backend/api.ts`.\n2. Register it in `ROUTES` inside `index.http.ts`, wrapped in `withAuth(...)` so it requires the\n global API key (dispatch wraps error handling).\n3. Add it to `FN_SPECS` in `backend/config.ts` (path, note, sample body) so it shows up in the\n Activity table and the Debug tab's picker.\n4. `vt push`.\n",[],[104],"62fccb20-2409-47d1-b439-93272bd0e887",".env.sample","e81e6098-9018-11f1-ba51-1607ee4eb77e",36,["D",1785857207264],"# Val Town env vars for uFns (set in the Val Town sidebar — Deno.env.set() is a no-op).\n\n# Comma-separated Val Town usernames allowed into the admin UI (/, /settings, /info).\n# Case-insensitive; unset or empty = nobody gets in (signed-in visitors see \"Access denied\").\nADMIN_USERS=\n",[],[113],"f3312fd8-02a6-496a-986f-44d7e39f2f13","frontend","ec17eeae-6128-11f1-87d6-1607ee4eb77e",1,["D",1780696381266],"directory",[128,129,130,131,132,133,134,135,136,137,138],[121],{"_33":221,"_13":222,"_36":223,"_38":122,"_40":41,"_42":224,"_44":45,"_46":225,"_17":48,"_49":125,"_51":-5,"_53":54,"_55":-5,"_73":226,"_18":227},{"_33":213,"_13":214,"_36":215,"_38":122,"_40":41,"_42":216,"_44":45,"_46":217,"_17":161,"_49":50,"_51":218,"_53":54,"_55":-5,"_73":219,"_18":220},{"_33":205,"_13":206,"_36":207,"_38":122,"_40":41,"_42":208,"_44":45,"_46":209,"_17":152,"_49":50,"_51":210,"_53":54,"_55":-5,"_73":211,"_18":212},{"_33":197,"_13":198,"_36":199,"_38":122,"_40":41,"_42":200,"_44":45,"_46":201,"_17":123,"_49":50,"_51":202,"_53":54,"_55":-5,"_73":203,"_18":204},{"_33":189,"_13":190,"_36":191,"_38":122,"_40":41,"_42":192,"_44":45,"_46":193,"_17":123,"_49":50,"_51":194,"_53":54,"_55":-5,"_73":195,"_18":196},{"_33":181,"_13":182,"_36":183,"_38":122,"_40":41,"_42":184,"_44":45,"_46":185,"_17":142,"_49":50,"_51":186,"_53":54,"_55":-5,"_73":187,"_18":188},{"_33":173,"_13":174,"_36":175,"_38":122,"_40":41,"_42":176,"_44":45,"_46":177,"_17":161,"_49":50,"_51":178,"_53":54,"_55":-5,"_73":179,"_18":180},{"_33":165,"_13":166,"_36":167,"_38":122,"_40":41,"_42":168,"_44":45,"_46":169,"_17":48,"_49":50,"_51":170,"_53":54,"_55":-5,"_73":171,"_18":172},{"_33":156,"_13":157,"_36":158,"_38":122,"_40":41,"_42":159,"_44":45,"_46":160,"_17":161,"_49":50,"_51":162,"_53":54,"_55":-5,"_73":163,"_18":164},{"_33":147,"_13":148,"_36":149,"_38":122,"_40":41,"_42":150,"_44":45,"_46":151,"_17":152,"_49":50,"_51":153,"_53":54,"_55":-5,"_73":154,"_18":155},{"_33":139,"_13":140,"_36":141,"_38":122,"_40":41,"_42":142,"_44":45,"_46":143,"_17":48,"_49":50,"_51":144,"_53":54,"_55":-5,"_73":145,"_18":146},"4a4fc7c0-88a2-4fc8-907e-a84d47f5d374","utils.ts","ec609fd2-6128-11f1-ac3a-1607ee4eb77e",3,["D",1780696381742],"// utils.ts — Formatting helpers for SSR pages.\n\nexport function formatJson(raw: string): string {\n try {\n return JSON.stringify(JSON.parse(raw), null, 2);\n } catch {\n return raw;\n }\n}\n\nexport function truncate(s: string, max: number): string {\n const flat = s.replace(/\\s+/g, \" \").trim();\n return flat.length > max ? flat.slice(0, max) + \"…\" : flat;\n}\n\nexport function isoUtc(ts: string): string {\n return ts.replace(\" \", \"T\") + \"Z\";\n}\n\nexport function methodChip(method: string): string {\n if (method === \"GET\") return \"blue\";\n if (method === \"POST\") return \"green\";\n if (method === \"PUT\" || method === \"PATCH\") return \"orange\";\n if (method === \"DELETE\") return \"red\";\n return \"grey\";\n}\n",[],[121,140],"bccdb792-426f-4081-9aad-a6b7deda33b3","types.ts","ec7b6a4c-6128-11f1-b845-1607ee4eb77e",71,["D",1785861997486],2,"// types.ts — View models passed from backend handlers into SSR pages.\n\nimport type { RequestLogEntry, WebhookLogEntry } from \"../backend/db.ts\";\n\nexport interface UserDetails {\n user_name: string;\n user_email: string;\n dynamic_vars: Record;\n}\n\nexport interface ActivityView {\n requests: RequestLogEntry[];\n webhooks: WebhookLogEntry[];\n reqTotal: number;\n whTotal: number;\n tab: \"requests\" | \"webhooks\";\n page: number;\n totalPages: number;\n}\n\n/** The single admin page: mock user + API key (Data tab) and the Activity log. */\nexport interface AdminView {\n saved: boolean;\n values: Record;\n apiKey: string;\n activity: ActivityView;\n baseUrl: string;\n}\n",[],[121,148],"3e9ce01d-ce1d-47f9-afd5-23fa685528b8","layout.tsx","ec667934-6128-11f1-b2c9-1607ee4eb77e",106,["D",1785871009139],5,"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// layout.tsx — Shared beer.css shell: top app bar, hash-based tabs, panels.\n\nimport type { ComponentChildren } from \"https://esm.sh/preact@10.29.1\";\nimport { APP_NAME } from \"../backend/shared.ts\";\nimport { GLOBAL_CSS } from \"./styles/index.ts\";\n\nconst BEER_CSS = \"https://cdn.jsdelivr.net/npm/beercss@4.0.21/dist/cdn/beer.min.css\";\nconst BEER_JS = \"https://cdn.jsdelivr.net/npm/beercss@4.0.21/dist/cdn/beer.min.js\";\nconst MDC_JS =\n \"https://cdn.jsdelivr.net/npm/material-dynamic-colors@1.1.2/dist/cdn/material-dynamic-colors.min.js\";\nconst ICONS =\n \"https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@24,400,0,0\";\n\n/** Brand seed — beer.css generates the full M3 palette from this at runtime.\n * Distinct from uAgents' blue (#2E6BE6) so the two admin UIs read apart. */\nconst BRAND_SEED = \"#7C4DFF\";\n\nexport interface AdminUser {\n username: string;\n avatarUrl?: string;\n}\n\ninterface ShellProps {\n children: ComponentChildren;\n user?: AdminUser;\n}\n\n/** Full HTML document with beer.css and a minimal top app bar. Pass `user` on\n * authenticated admin pages to show the signed-in badge + sign-out button. */\nexport function Shell({ children, user }: ShellProps) {\n return (\n \n \n \n \n {APP_NAME}\n \n \n \n \n